Sometimes I see configurations that lack of sandbox layer. Sandbox concept is very important against malware, especially when browsing the web, Sandboxie (avalaible also for free) is my favourite sandbox software, basically with our browser sandboxed even if we accidentally visit a malicious URL that downloads a malicious payload then our real OS is protected from it. Browser security and security extensions can fail and miss a malicious URL. Sandbox software are also good to test new software, now it is avalaible also Windows Sandbox which for me is also good. The browser must be the first line of defense; unfortunately sandbox layer doesn't protect us from phishing sites, for this we have security extensions and common sense.